General

  • Target

    8927f086d44df83e76102426599d056e

  • Size

    2.3MB

  • MD5

    8927f086d44df83e76102426599d056e

  • SHA1

    7cfd64963ee9884c2c9a6cebf0fd650fbbaea2ae

  • SHA256

    58a55c72661f66be391a2016968fa4725b231a0a34ebad40d311a6412f76471e

  • SHA512

    2f1b9da0d1a02748d9b53c72248fe67c556aa873a6ca3e8ff11682e1b75470f1523d1228a6c9b0d107d3521b41e0fc004da2b266bc03e69458bb9ff2ffe52c4f

  • SSDEEP

    49152:2A2NshvHIFmpXDzhA1X6e1/8r25afeF5dOJf9PX0u:2A2Uompzd6J8rvodufuu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 8927f086d44df83e76102426599d056e
    .exe windows:5 windows x86 arch:x86

    03e79a94d0dcb51acdcf1e8fbb5bd993


    Headers

    Imports

    Sections

  • $COMMONFILES/PPLiveNetwork/1.0.1.0535/$OUTDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/AsynDownload.dll
    .dll windows:4 windows x86 arch:x86

    78e5cd43bf52508fcd4fadb0203d9713


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/CommonFuncDll.dll
    .dll windows:5 windows x86 arch:x86

    c7793743bdccc057b876244e918e1242


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    37c57c99267b241d11cb1f6f96b0ba5e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GetCommentsInfoDll.dll
    .dll windows:4 windows x86 arch:x86

    1e2dbd1840e910287de8240532354090


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InetLoad.dll
    .dll windows:4 windows x86 arch:x86

    55e79df82a11a9c3b96f7ebb44d55181


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    109c032cfbd301a5463d71c5477714b2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPInstallLog.dll
    .dll windows:4 windows x86 arch:x86

    256af4ebe940c94257ae641d926c73e1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PPInstallerDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f2654d138a6fc79f9c03fa8d4930b660


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/PluginInstaller.exe
    .exe windows:4 windows x86 arch:x86

    35b8b55412f09fbe3d6457fbaac83ce1


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    35f00d8e6eac3c59034aba68dbcd5c51


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/npplugin2.dll
    .dll windows:4 windows x86 arch:x86

    8b7fa4b44529bcdfb8b612d6a651f464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pnsis.dll
    .dll windows:4 windows x86 arch:x86

    31c6ac2144003ec772b515931addb3ad


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    84341da8d21c6a4a9b07199dab3425dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4caeb5b87f3c77748d0c2e9006d955d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/time.dll
    .dll windows:4 windows x86 arch:x86

    2e3a4d1f132aea64d421c1e936bcc407


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.1.0535/$OUTDIR/PluginInstaller.exe
    .exe windows:4 windows x86 arch:x86

    35b8b55412f09fbe3d6457fbaac83ce1


    Code Sign

    Headers

    Imports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.1.0535/$OUTDIR/mframe.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    35f00d8e6eac3c59034aba68dbcd5c51


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.1.0535/$OUTDIR/npplugin2.dll
    .dll windows:4 windows x86 arch:x86

    8b7fa4b44529bcdfb8b612d6a651f464


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.1.0535/$OUTDIR/pplugin2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    84341da8d21c6a4a9b07199dab3425dc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/Internet Explorer/PPLite/plugin/1.0.1.0535/$OUTDIR/ppp.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4caeb5b87f3c77748d0c2e9006d955d5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_19_/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_19_/components/PPInstallerDll.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    f2654d138a6fc79f9c03fa8d4930b660


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • 3.1.3.0042/$OUTDIR/GdiPlus.dll
    .dll windows:6 windows x86 arch:x86

    ef4c749f5dec4632456950949469f18c


    Code Sign

    Headers

    Imports

    Exports

    Sections